A massive data breach of a payment-card processor's network could involve more than 10 million compromised card numbers, according to security news writer Brian Krebs in his online posting today.
The name of the payment processor is not disclosed, but Krebs writes that Visa and MasterCard began alerting banks across the country and warning that specific payment cards may have suffered fraud because of the alleged breach. MasterCard today did confirm that it is in the midst of an investigation regarding a potential breach. Visa indicated it would shortly release its own statement on the matter.
MORE: IBM: Internet security progress made but nasty exploits grow
MasterCard issued a comment, saying it's "currently investigating a potential account data compromise event of a U.S.-based entity and, as a result, we have alerted payment-card issuers regarding certain MasterCard accounts that are potentially at risk. MasterCard is concerned whenever there is any possibility that cardholders could be inconvenienced and we continue to both monitor this event and take steps to safeguard account information. If cardholders have any concerns about their individual accounts, they should contact their issuing financial institutions. Law enforcement has been notified of this matter and the incident is currently the subject of an ongoing forensic review by an independent data security organization. It is important to note that MasterCard's own systems have not been compromised in any manner."
Ellen Messmer is senior editor at Network World, an IDG publication and website, where she covers news and technology trends related to information security.
Read more about wide area network in Network World's Wide Area Network section.
